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Amendments to the Claims 

The listing of claims will replace all prior versions, and listings of claims in the 
application. 

1. (Currently Amended) A file security system for restricting access to 
electronic files, said file security system comprising: 

a key store,, being configured to store a plurality of cryptographic key pairs, each 
of the cryptographic key pairs includ e s including a public key and a private key, at least 
one of the cryptographic key pairs pertaining to a predetermined time; and 

an access manager^ operatively connected to said key store, said acc e ss manager 
being configured to determine whether the private key of the at least one of the 
cryptographic key pairs pertaining to the predetermined time is permitted to be provided 
to a requestor based on a current time, 

wherein the requestor requires the private key of th e at least one of the 
cryptographic key pairs pertaining to the predetermined time to access an encrypted 
h e ad e r document key in a header of a secured electronic file, and wherein a data portion 
of the secured el e ctronic file which w as previously secured using a the document key, 
and wherein the encrypted header includes the document key and access rules for the 
secured electronic file , the access rules for further protecting the document kev . and 
wherein the encrypt e d h e ad e r document key was previously s e cur e d encrypted by the 
public key of the at least one of the cryptographic key pairs pertaining to the 
predetermined time. 
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2. (Currently Amended) The file security system as recited in claim 1, 
wherein said access manager provides is configured to provide the private key of the at 
least one of the cryptographic key pairs pertaining to the predetermined time to the 
requestor if the predetermined time is less than or equal to the current time. 

3. (Currently Amended) The file security system as recited in claim 1, 
wherein the requestor is a client module that operatively connects to say said access 
manager over a network. 

4. (Currently Amended) The file security system as recited in claim 1, 
wherein said file security system further comprises: 

at least one client module , said at l e ast one client modul e being configured to 
select the predetermined time and secure the electronic fil e, to generate to secured 
e lectronic file, using the public key of the at least one of the cryptographic key pairs 
pertaining to the predetermined time so as to provide a time-based access restriction to 
the electronic file. 

5. (Previously Presented) The file security system as recited in claim 4, 
wherein said client module is further configured to unsecure the secured electronic file 
by acquiring the private key of the at least one of the cryptographic key pairs pertaining 
to the predetermined time from said key store, and then uns e curing unsecure the secured 
electronic file using the private key of th e at l e ast one of th e cryptographic key pairs 
pertaining to the predetermined time. 
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6. (Currently Amended) A method for restricting access to an electronic 
document, said method comprising: 

identifying an electronic document to be secured, the electronic document having 
at least a data portion that contains data, and a header portion that contains access rules 
for the electronic document; 

determining whether a time-based access key is already available for a 
predetermined time, otherwise generating a time-based access key for the predetermined 
time; 

securing the data portion of the electronic document through use of a document 
key to produce a secured electronic document; 

storing the document key in the header portion of the electronic document, 
wherein the access rules are provided for further protecting the document key ; 

securing the header portion of the electronic document through the use of the 
time-based access key; and 

storing the secured electronic document. 

7. (Previously Presented) The method as recited in claim 6, wherein the 
time-based access key has an access time associated therewith. 

8. (Previously Presented) The method as recited in claim 7, further 
comprising: 
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storing the time-based access key at a remote key store, wherein the time-based 

access key is subsequently retrievable from the remote key store when the current time is 

equal to or greater than the access time associated with the time-based access key. 

9. (Previously Presented) The method as recited in claim 8, wherein said 
method is performed on a client machine that operatively receives the time-based access 
key from the remote key store over a network. 

10. (Currently Amended) A method for restricting access to an electronic 
document, said method comprising: 

identifying an electronic document to be secured, the electronic document having 
at least a data portion that contains data, and a header portion that contains access rules 
for the electronic document; 

obtaining a document key; 

encrypting the data portion of the electronic document using the document key to 
produce an encrypted data portion; 

obtaining a time-based access key; 

storing tho document key in th e header portion; 

encrypting the h e ad e r portion document key using the time-based access key to 
produce an encrypted h e ader document kev : 

storing the encrypted document key in the header portion: 
protecting the document key using the access rules: 
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forming a secured electronic document from at least the encrypted data portion 

and the e ncrypted header; and 

storing the secured electronic document. 

11. (Previously Presented) The method as recited in claim 10, wherein the 
time-based access key is a public time-based access key. 

12. (Previously Presented) The method as recited in claim 10, wherein the 
time-based access key has an access time associated therewith. 

13. (Previously Presented) The method as recited in claim 12, wherein the 
time-based access key is available from a remote key store when the current time is equal 
to or greater than the access time associated with the time-based access key. 

14. (Previously Presented) The method as recited in claim 13, wherein 
the access time is a day of a year, and 

the time-based access key is unique for each day of the year. 

15. (Previously Presented) The method as recited in claim 13, wherein said 
method is performed on a client machine that operatively receives the time-based access 
key from the remote key store over a network. 
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16. (Currently Amended) A method for accessing a secured electronic 
document by a requester, the secured electronic document having at least an encrypted a 
header portio n, having an encrypted document key and access rules, and an encrypted 
data portion, said method comprising: 

obtaining a time-based access key; 

decrypting the encrypted head e r portion using the tim e based access key to 
produc e a document key and access rules for th e secured oloctronic document; 

decrypting the document key using the time-based access key, subject to 
protection by the access rules; 

decrypting the encrypted data portion of the secured electronic document using 
the document key to produce a non-encrypted data portion; and 

supplying the non-encrypted data portion to the requestor. 

17. (Previously Presented) The method as recited in claim 16, wherein the 
time-based access key is identified by an indicator within a header portion of the secured 
electronic document. 

18. (Previously Presented) The method as recited in claim 16, wherein the 
time-based access key is a private time-based access key. 

19. (Currently Amended) The method as recited in claim 18, wherein the 
time-based access key being obtained is acquired from a server. 
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20. (Previously Presented) The method as recited in claim 16, wherein said 
obtaining of the time-based access key is dependent on the current time. 

21. (Previously Presented,) The method as recited in claim 16, wherein the 
time-based access key is associated with an access time, and wherein said obtaining of 
the time-based access key is permitted when the current time is greater than or equal to 
the access time. 

22. (Previously Presented) The method as recited in claim 21, wherein, if 
permitted, during said obtaining step the time-based access key is obtained from a server. 

23-25. (Cancelled) 

26. (Currently Amended) A tangible computer z readable medium including at 
least computer program code for r e stricting access to an el e ctronic document, said 
computer r e adable medium having instructions stored thereon, the instructions 
comprising: 

computer program code for identifying an electronic document to be secured, the 
electronic document having at least a data portion that contains data, and a header 
portion that contains access rules for the electronic document; 

computer program code for determining whether a time-based access key is 
already available for a predetermined time, otherwise generating a time-based access key 
for the predetermined time; 
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computer program code for securing the data portion of the electronic document 
through use of a document key to produce a secured electronic document; 

computer program code for storing the document key in the header portion of the 
electronic document; 

computer program code for protecting the document key using the access rules: 

computer program code for securing the header portion of the electronic 
document through the use of the time-based access key; and 

computer program code for storing the secured electronic document. 

27. (Previously Presented) The computer readable medium as recited in claim 
26, wherein the time-based access key has an access time associated therewith. 

28. (Previously Presented) The computer readable medium as recited in claim 

27, 

wherein said computer readable medium further comprises: 

computer program code for storing the time-based access key at a remote key 
store, and 

wherein the time-based access key is subsequently retrievable from the remote 
key store when the current time is greater than or equal to the access time associated with 
the time-based access key. 



29. (Currently Amended) A tangible computer-readable medium containing 
having stored thereon computer-executable instructions for controlling at least one 
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proc e ssor by that, if executed by a computing device, cause the computing device to 

perform a method comprising: 

identifying an electronic document to be secured, the electronic document having 
at least a data portion that contains data, and a header portion that contains access rules 
for the electronic document; 

determining whether a time-based access key is already available for a 
predetermined time, otherwise generating a time-based access key for the predetermined 
time; 

securing the data portion of the electronic document through use of a document 
key to produce a secured electronic document; 

storing the document key in the header portion of the electronic document; 
protecting the document key using the access rules: 

securing the header portion of the electronic document through the use of the 
time-based access key; and 

storing the secured electronic document. 

30. (Currently Amended) A tangible computer-readable medium containing 
having stored thereon computer-executable instructions that, when if executed by a 
proc e ssor computing device , causes cause the processor computing device to perform a 
method comprising : 

identify an electronic document to be secured, the electronic document having at 
least a data portion that contains data, and a header portion that contains access rules for 
the electronic document; 
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obtain a document key; 

encrypt the data portion of the electronic document using the document key to 
produce an encrypted data portion; 

obtain a time-based access key; 

store the document k e y in th e header portion; 

encrypt the header portion document key using the time-based access key to 
produce an encrypted head e r document kev : 

store the encrypted document key in the header portion: 
protect the document key using the access rules; 

form a secured electronic document from at least the encrypted data portion and 
the encrypted header; and 

store the secured electronic document. 

31. (Currently Amended) A tangible computer-readable medium containing 
having stored thereon computer-executable instructions that, when if executed by a 
processor computing device , causes cause the proc e ssor computing device to perform a 
method comprising : 

obtain a time-based access key; 

d e crypt an encrypt e d header portion of a secured el e ctronic document using the 
tim e based access key to produce a docum e nt key and access rul e s for the secured 
electronic document; 

decrypt a document key in a header portion using the time-based access kev. 
subject to protection by access rules in the header portion; 
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decrypt an encrypted data portion of the secured electronic document using the 

document key to produce a data portion; and 

supply the data portion to the requestor. 
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